Re: standard for executable files under /usr/share
On Tue, 18 Mar 2003 22:04, sean finney wrote:
> > Under /usr/lib:
> > /usr/lib/man-db/.+
> > /usr/lib/apt/methods/.+
> > /usr/lib/dpkg/.*
> >
> > Those are the only ones that need to be labeled.
>
> /usr/lib/cgi-bin/*???
That's a different issue and very much a special case.
cgi-bin scripts from /usr/lib/cgi-bin run in a different context depending on
whether they are run from the user or from the web server.
I expect that almost every security system will have something special planned
for that directory.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
Reply to: